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(54) SIGNATURE SYSTEM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To attain a signature 
system capable of restoring a message and 
having high safety. 

SOLUTION: Mapping (f) from GF(p)xGF(p) to GF 
(p) satisfying following tow conditions to GF(p) 
is set up as a message masking expression. In 
the 1st condition, three variables (t), (j), (e) are 
not replaced by two algebraic expressions in f 
(gtyAj, myAe) and f(gtyAj, mge) in the case of 
GF(p) g, yA, m and Zq={0, 1,..., q-1} t, j, e. In 
the 2nd condition, the reverse image of r2=f(rl, 
m) is m=f-l(rl, r2). A signature expression is 
prepared by mapping ha, hb, he from GF(p)xGF 
(p)xGF(p) satisfying following expressions [1], 
[2] to GF(p). Where, hb(r2', s, l)-ha(r2', s, 1) 
:?i:hb(rr2', ss, 1) when ha(r2', s, l)=ha(rr2', ss, 
1) and hc(r2', s, l)=hc(rr2', ss, 1) [1] and he 
(r2', s, l)-ha(r2', s, l):^hc(rr2', ss, 1) when ha 
(r2', s, l)=ha(rr2', ss, 1) and hb(r2', s, l)=hb 
(rr2', ss, 1) [2]. 
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(57) imm 

mm mTtmmi-'-^^^co^^ ^m^n 
mm^m arc^n. 2i:WztGF{p) xgf(p) 

A,GF(p) ^amm iy< 'y^~'J-7X^^t-t^. 
1 :GF(p) 3g, , ffl, Zq= {0,l,---,q-l} 3t. j, e 
t:ML, f (g t y A J , my A at/"f(g <■ yA^ , m 

2:[slt<. r2=f(ri,in)Ojt®{iiB=f ^ri.rz) fS)^ 
2^^fz'tG¥(p) XGF(p) XGF(p) :<?-fbGF 
(p) ^mmha, hb, hclZZm^^i:i¥^. 

1. ha(r2 ' ,s,l)=ha(rr2 ' ,ss, 1) , hc(r2 ' ,s, l)=hc(rr2 ' , 
ss, 1) C?) i; ^ hb(r2 ' , s , 1) -ha (ra ' , s, 1) ^hb(rr2 ' , ss, 1) 

2. ha(r2',s,l)=ha(rr2',ss,l), hb(r2 ' ,s,l)=hb(rr2 ' , 
ss, 1) C30 § he (r2 ' , s , 1) -ha (r2 ' , s, 1) ^hc (rr^ ' , ss, 1) 
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GF(p) ±S«S^I>g:S^Ttti3V^T, giSt/Sl.^liC* 
m eGF{p) t^l>t^, 

k m^mmMi^ztmmtL. r,^ (mod p ) 
m^^m&mzmt ^^■yh^yhti, gf(p) x 

GF(p) *^ii,GF(p) ^c^^fi^f t-rSi:^. 

GF(p- ) iDTU^g tl, ^iOfiiC^q tt, GF(p^ ) ± 

=g 1^ (mod p ) ^3S.y b^ybt L, GF(p 0 XGF 
(P ^) :6^^>GF(p 1) /\i7)^fiS-fifcL, GF(p ^) *^ii.1r 

UCTT (fi(ri, m)) &MV->tW^4»It:*3(tl.^'/ 
E(GF(p))i07cS:G bl. ^tOfim^q bl. 

E{GF{p))±^m^ii^m^ij^izm^x. m^Lfz\^^ 
im GGF(p) t-r-sfc^. 

k m^m^MAZbim^tL. Ri=kG=(r, , ry) 

E(GF(p))XGF(p) /j^A^GF(p) ^^mm^Pbtlb^ . R 
itm &t:F j:0^}^L/lF(Ri, in)^fflV^-CW^i^ 
m^zism^ y^^~'JU7€^:^mizi-l^'y^~'J'?x 

i fc mmb itz^ -y ^r->>■a7^s^ 

[IMIM4 ] P mmb I, r ^lESmt L. 

GF(p- ) ±'^m^titzmmmE bt. 
E(GF(p^ ))i^7c^G tL. ^c^)mmq bt. 

E(GF(p^ ))±S«S^I>W^*stt;*>V^T. W^SL/^^V^ 

eGF(p=^ ) t^Shg'. 
k ^m^m^HMiZbinMbL. Ri=kG=(r,. r, ) 

E(GF(p^ ))XGF(p^ ) *^il,GF(p^ ) ^CO^ft^Fit^S 
tL, GF(p- ) *^A,^PfiSZ ,,^\(rMi$,i:7tbtlb 
Ritm SFitCiD^mL. <Ic^<i^Et;7rSffll,^T 

^L;^^(Fi(Ri, m)) ^m^xm^^^miztiifh 
^ ^y^-=jm7ti:«im^z-ti^^y^'-=j'?x^^imi& 

t^^b mmb y^-mjiMm^ij^. 

[IMII5] mm a. GF(p) 3g, y, St^' m, MXJ^ 



f (g * y fl ^ , my M St/'f(g t y A ^ . iisM t 

[imme] mm a, gf(p^ ) 3g, y^ m^.m 

iz 1 ,= {0,l,---,q-l} 3t, jRX/e izML^ 

f] (g* y A .my A ' ) ^t^'fi (g* y A ^ . mgM i/ZH 

, 3 S;i4t, j , e 2 immk^ximmTh I. ; t 
^!ifitt t/tft«ii2iea0Mix^^aroiM^fflv^/-cg^ 

im-^mi ] W E(GF(p)) 3G A , GF 

(p)3in,Mmc Z, = {0,l,---,q-l} 3t, j&Ve 
L. 

F(tG+jY ft , m Xx(eYft ))&?/'f (tG+jy a , m Xx(eG)) 

ms.im\ ^mwi. e(gf(p^ ))3g am a . gf 

(P'^ ) 3m,mfl,Z Z, = {0,l,---,q-l} 3t, jSt/"e 

ML. 

f (tG+jY A , m Xx(eYA ))S.m'(tG+jY , , m ■ x(<'G)) 

[if*lM9] mm GF(p) 9r, , r,, m, g&tXy 
A tcML, r2=f(ri,m)c^Mi-iii=f '(1-1,1-2) TS*^ 

f -i(ri/g, r2)*<^(m,g) 

btah^b mmb L/sii^if 1 imffmmmfm^ 

[ff^lSlO] m%ii\t. GF(p- ) 3ri, rj, m, g, 
yfl t:ML. r2=fi(ri,m) <mm^ix-^ ix^,r^) 
«-rSt#, fiE(7)2^i^rai^si, ^/-tcMLT 

(ri/g, rj) (m,g) 
S.t^'fri(ri/y A , rj) ^0(m,yA ) 

btah^b mmb ^^fzmm. 2 iBSt^siEmroigi^ 

mm. \ 1 ] "^fiF \t. E(GF(p)) 3Ri, Y A at^'G 
MOTcGF(p) 3 mat/VatcML. r2=f (Ri ,m)c?33t«&m= 

f -i(Ri,r2) x:'^mhb%. m.<r)2mm.4>, ^ 
\znhx 

f -i(Ri-G, r.,)^4>{^S^ 

mfi -i(Ri-Y A . rs) ^^(m,YA ) 

bt£h^bmmb \.fzmm3im<mwMmm^ 

[it*3Sl 2] -^MFiJi. E(GF(p^ ))3Ri, Y , ^l^" 
G MlXt:GF(p^ ) Bm&tA'rjtlML. rj =f (Rj , m) iDjtfi 

^m=f - 1 (Ri , ) Ximfh b % . em^O 2 E^IBS 
^/)tMLT 
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f -i{Ri-G, r2)^<i?>(m,G) 

mi -i(Ri-Y , r^) *TP{m,\, ) 

[lt*lSl 3] mm (r, y)^r +y(GF(p) ±.(7} 

MM) T^m$tih^ t mm ttzmmn i imco?( 

[lt*lMl4] mmm. (r, y)^r +y(GF(p^ ) _h 

mm 15] w {±. finft^io x^rait^ffl 

V^T. (R, y)-x(R)+y(GF(p) ±£Oj[lS:) 

V>T, (R, y)^x(R)+y(GF(p^ ) ^COMM) X'^^tL 

[if3)<lMl 7] ^fi7r(±, {a, , a, , a, } 
&GF(p^ ) cr,G?(p)±(Dmmb-t6t^. GF(pr)<7)7Cx 
=Xiq;i +---+X j. oIj ( Xi , Xj. eGF(p)) t:>IPt 

7r( x) =xi+X2P+ ■■■+Xi.p '^-i 
mm 18] P &SiCt L. ^PI#:GF(p) c7)7E^g 

GF(p) ±^m^tLm^if^^zt3^^x . m^m 

F{p) k ^g:S^M£l;t>I.SLl[t r 

2^3S-7h^yhri=gk tm OI+m§fL^GF(p) 

<5D7r;tL. ra' ^rj (mod q) tL. 

ha, hb, hcmmmi , XZ , XZ , :{)^^>Z , /\C0^11 

ha(r2',s,l)k = hb(r2',s,l) + hc(r2 ' ,s, l)x ^ (mod 

q) 

mm 19] p mmt l. r mmmt l. 

#£F(p- ) cOTC^gtL. ^coimirci bL. 

GF(p- ) ±&m^iim^ij^izi5\>^x . m^m m 

eGF(p- ) tt^t^, 
=r2 (mod q) t 

ha, hb, hc^^P^iiZ , XZ , XZ , *>^>Z , ^<7)'^m 
ha(r2',s,l)k = hb(r2',s,l) + hc(r2 ' ,s,l)x a (mod 



q) 

I mm 2 0] p ^ «s t L . irPiftGF (p) ±£»§ 
tifzmmm^ t l. 
E(GF(p))07t^G tL. ^t^em^q tL. 

E(GF(p))±5g»§fLl>g:g^j5^tfcV^T, g^SLZ-cV^^t 
6GF(p) tt^t^. 

k ^g^,:t*^'ttSict I.SLmt r2^aS'yb;'<>'h 
Ri=kG tm t:J;t9ltm5tLl.GF(p) <^7UtL. =r2 
(mod q) t L. 

ha, hb. hc^^HIiZ , XZ , XZ , ^^^I , ^\CO^m 
ha(r2',s, l)k = hb(r 2,s,l) + hc(r2',s,l)x j (mod 

q) t-(^s mmx'^ I. i 0 mm-^ ; t £#isfc i 

fz?(>y^~=j^ijimm^ij^. 

mm,2 1 ] p immt i. r ^isisct l. *pi 

ftGF(p^ ) ±S«§^>t«Rft^&E tl. 
E(GF(p^ ))C7)7U*G tL, ^i^fili^q bl. 

E(GF(p^ ))±7E«$iLSlf,:ijjU.:J^i^T. 

:X^m eGF(p' ) tlf^^. 

k ^m^m^nMiztmmb r2&n$ .y h^tyh 

Ri=kG tm IZX'OEm^il^^mmi ,,<^7tbL. 
=r2 (mod q) t L. 

ha, hb, hc^:|-M , XZ , XZ , f^t^l , 

b-rtb^. m^m. 

ha(r2',s,l)k = hb(r2',s,l) + hc(r2 ' .s, l)x ^ (mod 

q) t-i^s mm-Qthi'b^zmm-hzbmmbL 
fz^^y^-i^wmm^ii^. 

imm22] ^^fiha.hb, he {4, r2',s &Z , Otc 

t-ri. t # . )3»feii£$ii/-cFi7gfi&i^<tt*i^z 

1. ha(r2 ' ,s, l)=ha(rr2 ' ,ss,l) , he (r2 ' , s, l)=hc (rr2 ' , 
ss,l) ^t# 

hb(r2',s,l)-ha(r2',s,l)^hb(rr2',ss,l) 

2. ha(r2',s,l)=ha(rr2',ss,l), hb(r2',s,l)=hb(rr2' , 

ss,i) c;ot# 

hc(rg ' ,s, l)-ha(r2 ' ,s,l) ^hc(rr2 ' ,ss,l) 

^mfL-f^ z. b mm b uzmm. 18,^19.^2 
QmL<\±mm.2im.<r)m.wMmmmim^tzm^ 

mm23] ;i:fiha.hb,hc{4. 

ha(r2',s,l)=r2', he(r2 ' ,s,l)=st L. 
hb(r2',s,l) 

r2'=rr2', s=ssi?)t § , hb(r2 ' ,s,l)=hb(rr2 ' ,ss, 1) , 
r2'=rr2', hb(r2 ' ,s,l)=hb(rr2' ,ss,l) <?)ti, s=ss, 
hb(0, 0. 1) ^0, 

mtz-tz b mmb Lfzmm.2 2tm<n^ v^-i^ 

[It*ll2 4] ^?fiha,hb,hc{i. 
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ha(r2 ' ,s,l)=s, hc(r2 ' ,s, l)=r2 ' t 
hb(r2',s,l) {±. 

s=ss, rj'^rrj', <7)t # , hb(r2 ' ,s, l)=hb(rr2 ' ,ss,l) 

s=ss, hb(r2 ' ,s, l)=hb{rr2' ,ss,l) fOi: ^ , rj '=rr2 \ 

hb(0, 0, 1) ^0 

[IMII2 5] »a,hb.hc|±. 
haCrg' ,s,l)=s, hbCrg' ,s,l)=r2' b 
hc(r2',s,l) {4, 

r2'=rr2', s=ssC^)t.% . hc(r2 ' ,s, l)=hc(rr2 ' ,ss, 1) , 
s=ss, hc(r2 ' ,s, l)=hc{rr2' ,ss,l) <J0 i: ^ , r2 ' =rr2 ' 
hc(0, 0, 1) ^0 

m^me] »a,hb,hc{±. 

ha(r2 ' ,s,l)=r2 ' , hb(r2 ' ,s, l)=si: 
hc(r2',s,l) {±, 

r2'=rr2', s=ss(7)fc#, hc(r2 ' ,s, l)=hc(rr2 ' ,ss, 1) , 
r2'=rr2', hc(r2 ' ,s,l)=hc(rr2 ' ,ss, 1) (7)t^,s=ss, 
hc(0, 0, 1) *0 

[mm2 7] »a,hb,hc{±. 
hc(r2',s,l)=s, hb(r2',s,l)=r2'i; 
ha(r2',s,l) {4, 

r2'=rr2', ha(r2 ' ,s,l)=ha(rr2 ' ,ss, 1) i55t#,s=ss, 
s=ss, ha(r2',s,l)=ha(rr2' ,ss,l) <J0 i: § , r2 ' =rr2 \ 

ha(0,0,l) ^0 

[lt*lM2 8] »a,hb,hc{±. 
hc(r2',s,l)=r2', hb(r2 ' ,s, l)=si; 
ha(r2',s,l) {4, 

r2'=rr2', ha(r2 ' ,s,l)=ha(rr2 ' ,ss, 1) COt^,s=ss, 
s=ss, ha(r2 ' ,s, l)=ha{rr2' ,ss,l)(Z)i: S , r2'=rr2\ 
ha(0,0,l) *0 

mfzt^ t mmt ifzm^2 2mmco^ -y't-i^ 

[it*]B2 9] »b(r2',s,l) (4. 
hb(r2',s,l)=r2' +s +1 

T^m^ti^^tmm Lfzimm2 3^L<{4if* 
II 2 4 tm(r>^ y ^-mjtmm^if^. 

[IMII3 0] ?fthb(r2',s,l) {4. 
hbCrg' ,s,l)=r2' Xs +1 

II 2 4 issi^^ ■/ ^-'JUivmm^if^. 

[IMHSn »c(r2',s,l) {4. 
hc(r2',s,l)=r2' +s +1 



T^m^ii^ i t mwLt Lfzmsm 2 5 ^ l < (4fM 
m2 6im(D^ y^~m7mm^jj^. 

[ff*Il3 2] ;i:fihc(r2',s,l) (4. 
hc(r2 ' ,s, l)=r2 ' Xs +1 

T&m^fii ^ t mmt itzmm. 2 5 ^ l < (4if * 
112 6ie«co^ yb~=JU7€mm^ii^. 

[It*ll33] ^fiha(r2',s,l) i4. ha(r2 ' ,s, 1)=0 

t^s»(r2 ' ,s) AJf^y h<r)^m^vi^ti^mmrsT 
m&T^ izb^mib Lfzmsm 2 7 g l < amsm 
2 8Mm<7)^ -y't-i^^Mjmm^u^, 
im^3 4 ] nmki. ^y ^-i^-^x^^x^m 

ha(r2',s,l) #0 

x'hixd itm-^ xKi^tmmt itzimm 3 3 ib 

[if*IB3 5] Wa(r2'.s,l) i4. 
ha(r s l)=i +S+1 Xt>7 Zc iWMt Ltzm^^,3 

[;tTlS3 f>] mn^U si) (4. 

hi 1 s i)=i ^ +ixhizb mmt ifzm^ 

ip^4„e*fe^)X /-t-^ft^SM^^j^;, 

iEmtt. ^rRSftGF(p) mm^'i t^ri.7c&g t 

GF(p) ±^m^timt>1J^{-ii^'^X . m^Lfz^^^t: 
m eGF(p) t"!. t SLfik Sr. aS7h^>'bri = 
gi^ tm t:j;"9lfl^t§^-S.GF(p) C07Ur2;&\ 
0< r2 <q fc^rl.J:at:t 0. 

P t:>;#$*iiJ{J'|s]tT-fcl., ^=5:i5*>P -q t^Sr^i-IE 
L. 

GF(p^ ) Jijga$ixl>g^,*5^t*5v^T, m^Ltzu:Z 

eGF(p=^ ) i:t--g>t#. SL» aS .y b^yh 
r,=gk tm t-j;^)«)3g$fl^Z {0,1, -,p^-i } 

0< r. <q k^j:6Xo^zk*). 

±$mm^:m^^tifzr, m^^m^-^i> ; t mmt 
Ltz^i-y^-mimm^ij^. 

E(GF(p))c^7C^G tl., ^<r)mkU tl. 

E{G¥{p})±^m^ti6m^ij^iziiv^x , m^Ltzv^Jc 

eGF(p) b-f^b^. Sl^k 3S.yb;><yhri 
=g k tm t;j:i9lfBK§^l|,GF(p) c^Srj;^^ 

0< r2 <q h^cl> J;5t:t 
±iatEH^PI5E§^/Sr2 t ^mib 

Ltz^ 'y^-'JmmM^l5^. 
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E(GF(pr ))i7)7E^G tl. ^c^im^q kL. 

0< <q ttc^Xd^Zt*3 . 

im^-mA 1 ] mvimm \i. 

WiCffihash (m) £nitOf^;b ^) t^fflV ^ I, i fc t t/S 
it^JBl. |H12. 1^3. |a|4. |W|18. |BI19. |BI2 
0. ^3 7. IBI38. ^3 9^t<{4it*iM4 

[lt5f<lM4 3 ] P imWb L. *ll#:GP(p) tfOju^g 

GF(p) ±S«§ixSW^*5^t:i3t^T, W^^A <7)%m 
mkx ft . ^aW^Ya =g='«fct. W^UcV^jt&m GG 
F(p) tt-'St^. 

ri' (mod q), m' =m (mod q) 

ha, hb, hci^mm , XZ , XZ , *^/i>Z , ^O^fll 

ha(ri ' ,s,m')k = hb(ri ' ,s,iii' ) + hc(ri ' ,s,ni' )x ^ (m 
od q) 

m-mA 4 ] p mmt L.. r ^lESicfc L. 

GF(p^ ) Ai'm^tim^a^^zio^^x . m^m m 
mmi^ A , 'mm^iy , =g^^hL. m^Ltz\^-xin 

eGF(pr ) 

k ^m^^ti-m.^zbtmib L. n S >y b;;< y bri=g 

ri' =jr(ri) (mod q) , m' =7t{^ (mod q) i: L. 
ha, hb, hc^^Rg^Z , XZ , XZ , t^hl , ^iO^^l 

ha(ri ' ,s,m' )k = hb(ri',s,m') + hc(ri ' ,s,m' )x ^ (m 

od q) 

[lt«lM4 5 ] P L. ^r|5S*GF(p) 

E(GF(p))i07CK tt. ^iOfiiC^q fct. 



E(GF(p))±s«§3fil.S^,:^5*:(cfcv^T. m^Lfzv^-X 

&m eGF(p) 

k fc t L . a 5 'y h >f y bRi =k 

G tL. E(GF(p))>f)^(^GF(p) ^iO^?fi^ptt-|.t#. 

rl' =p(Rj) (modq), m' =m (mod q) t 

ha, hb, hc^mmi , xz , xz , *^^,z , ^^comn. 

ha(ri ' ,s,m')k = hb(ri',s,m') + hc(ri ' ,s,m')x j (m 
od q) 

^^(>s mMT^ I. J; 0 mim-i> ; t tits 

immA 6 ] P ^^St r ^iESSt L. *PI 

*GF(p' ) ±j^m^titzmmmE ti. 

E(GF(p^ ))C07C^G hL. ^c7)f4iC&q hL. 

E(GF(p- ))±&m^iim^u^i,zm^x. s^titv^ 

jt^m eGF(p^ ) bt^f^. 
k ^W^^*^'ffK(Ctl>SLIit L. 3S'yh;'<yhRi=k 
G tL. E(GF(p^ ))^^f>GF(pi ) ^vt?)^ft&pfct-'Si: 
L. GF(pi ) t^^Wmi p,= {0,l,--',P^-i } ^CO'W 

r, ' =;r( p(Ri)) (modq), m' =?r(m) (modq) 

ha, hb, hc^^rfigiiZ , XZ , XZ , il-hl , 

b^^h%. mm^. 

ha(ri ' ,s,m')k = hb(ri ' ,s,iii') + hc(ri ' ,s,m')x a (m 
od q) 

t-i^s mM-T^ m^-ti >r t uzm 

ymmfm^m\-^x. r ^x(R)^L<{4R^y (R) -c- 
g«§iii> z. t imm b L/ifi*Ji4 5^ t < \imm 

4 6ie«c^^ 'y-b-i^'flTcMW^a^sS;, 
[ff*IM4 8] '^^7t\±^ {«! , ^2 , -, a, } 
&GF(p- ) C0GF(p)±c7)SJSfc-ri.i:#. GF(p^ ) ff^jt 
x=Xiai +--+X J, ( Xi , Xj.eGF(p))t: 

TT ( x) =Xi+X2p+ ■■■+Xr p "^"1 

b imwc Lfzm^AAmfm^A 

[000 1] 

m^zmL. ftt. mmmm^'m'&o^mtbLxm 

[0002] 

mmcnmimw.) Mfwmzmmmmtwmt. 
nmx\±^tz'm' L -mzM'm t i^wv ^t^-r-. 
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-ffif^j m^mm^^mf 1 986^. -j^i^attt 

LT i± . mm r m^comm j mmm\ 1 9 s o 

[00 03] -mz^t^m^titzT 4 'j^mim 
^mziih^w^fm. hh\mmm\,zi.h'm^<D 

mmoiT^Tht. ttzm^Rmmmm^bii. 

bitm-timmu^Thi . zcowmmmRx/ 
nf,. }:iiMMi?.(^yii^^zii^ mmm^t mii^mm 
$:mmifzifm-^hi, -cLt.. zcnmmm^izx^ 

^\'mmm^bmm^i ^^r ^ < Mfriffl^a^^^ 
it-mmmmmzs§^mnz-:>\^x^mmzm 

mth fzi^coij^xh 0 . m^x'i±mmmmbm 

[00 04] a h\ .ic^)FS^jifiS»co«*WIi:^ 

iih#s^2. 3^mzmmt&. 

1 koblitz , " A Course in Number Theoryand Cryptog 
raphy " , Spr i nger-Ver 1 ag , 1987) L < ^>ilT V ^ 

g" (mod p) t-tS, gtp 

bnm-x.^h.fzb%\zaiSii^tc;^\m^X-hh. L 
L , P 4 0 ffiS^iO^a t ^ !> t , ±iaiti:iic^ 

>Iil{±Tft. 2-^mWLrbsifihhb%rb 

sji>t:>^m.^M^h<^itm^x'httK r t sifi^i 

i^*HiS;3]-»t;: j; D r t s &^ftSc?)ttfflSI=5r; t t^H 

[00 0 5] L*^L^:*i'/^, 3£^Fc07^ttg:Si^^31^ 

mm ) i\m lx. %bvbab ti-^mmyt£\^m% 



(D-b LXM. ^ 1 4 0|faS(7)tc^-C-^r< 2 0 
0 \-^io<^b^h:ibtimfl^fit.tztz 

[0006] iti^,£7)/ii^. « nfflfi^ffiffl Lfz%mm 
m-^^ifmmtitz. 

iWM) mzF, {GF (q) } cottfi. -ft^bh^mm. 
m<^m^<DWM\,z-^^^xmm^h. e {gf (q) } to 
m.t)^±% tpmm.x^\tit7tB p b , d 

mmmfmb-Th. zcob^. BPtdt^^tf^d- 
BP^iti:-ri> (BP^d0jp;ti>) (onmuxhi. 

L3f)-L. E {GF (q) } cO^;tiiil^OTQi:BPt:j^ 
Q=d ■ BP 

t i^i* d *«-ri>^i: ^.{f d J; 1 1 ^ d mm 
i±. mnmc^m^Lfy^-i K-t b p^q^^^s oMfum 

li. P^&btim<m:;F (p) irm^^m^-tt 
'&^tBdi,c^)X-hi. 

[0007] ii±.x\ Bi^mim-mmicommmii 

{ 3 ) W^r. ISfiEafi 

mz. ■$im.mnizmm^7;>m^tz7omt,. mmm-^ 

[0008] c:c7)if^, i-^lJ t J--^f' V b iimM. 

m^mmm^zx mmm2timhhi:b\ mmm 

iihbX^ ffilrt c7)aff (cfc v^XhmMb^j:^. Z. ffMW: 

^^^b Lx . )Mm^zxh^m^titzwm.^mmm l 
xm^. mmr^ommm^Kx\^h. mzcryn. 

ffjtol^T, 2, 3g^t-|>o 

mm^:'mth fz^m.umm'mrm s l , 

b. BfSo-:^[ffit£MicFfc. lf}^x£-:^[6ittMi: 
¥^zJJ)Ltzb%(n^ti\m = F (X) t&S*fffg^ 

m^h^:^~mzm%\-th. 
[0009] mz. WMi,z^xx. Mfi^^OiEittc^iE 

b . mx^^Ltz^^mm^ t t^-fm l^cmk^^t 

fc^lflffittOPHltdi, x = S (x, y, k, IDu ) to 
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[0010] :r-Hf u*>A>i7)ff^^S{t;taftffl^ffi^ 

F (x) ^iifisjt, mmm^t^j:t^—fyiznix. 
^'7f(r)-'mwmt IX . ^(^■&mmy t mmm i d u 

[0011] t^'V(4, ^-1f U*^^>-ei7)S*^fflffl 

|g I D u t P t7vl7 Lfzt% <7)ttl^l« 

C = P (Y, y, IDu) ^^fiatSiOJiT'. 

[0012] ztuzj: D . ^-^-ymmm(7^miL 
[0013] mz. Mwmmm:. mmmt txm 

mcommtlXli. Y!±, iS^Y^F (X) = (mo 

d p ) mm^^^ti. kumm^t^m^zx mm 

^1. Yu{4, iS^YusgAku (mod p ) j; DH" 
M-L. xu(±. sSixusS (X, yu, ku, IDu) 
= XXyu + kuXlDu (mod 0). (d^t:. 
c;.{4pc7)^-<7-raitfI) ^t^ctOItt:^^!. Pu{4. 

TtPu=P(Y, yu, IDu) = (YAyu)X(y 
uAIDu) (mod p) 

*^fiiS[c^j@m^VH\ M^HV (p) =p-i, ^z- 

(6) = 2 (j±, lt5) , (10) =4 (a. 1. 

3, 7, 9)xh^. ttz. im<^mzmKc2-^comm 

utviOrslWi. uA?;. (v) -1=0 (mod v) 

ti^ommmi^zf^±t^, mm. 30(10-1 = 3 
* -1=80 = 0 (mod 10) x$)^. tfz. mm 

Pt:-^V^TI±. it^-f np -1 = 0 (mod P ) fc^rO. >r 

n(;J^LTn'» -1 = 0 (mod n) tim±L^X^^^X^ 
(m3^(lJ:l,g:^. fgfjE) mz. i-HfUtJ--f^V 

(7)^iZli. :i-HfUi;:i-HfW. :3-— )f V t :i-HfW 

t (i:ffi5(:fgiiE*i'ie:^ST-$> l> *\ U t V t 

commcoimiir^mt^j:i. ^LxztLH. Mf (^- 
■ifwtffiii) ?:irix(^^mm\mx'Mwx%i. 



[0014] zti^m^. imc^mm. ^stto 
i^T(4;5'M«aiiaA*^\ !^ii¥2 - 324479-^ 

mitm^mm^zxi.m^mm^iix\>^immiThi 

(4) ^y't-i^^UTtm^ 

mz. m^. %m\<z-y\^x(nwm-tLx . ^mwR 
i.zm.mmm-h>i y^-i^mmMnz-^^^xmrn-t 

[0015] 1 99 3:^l:Nyberg-Rueppel(: J; "OWWM 

m^tifz. mzmmmmm^mv^fz^ y-i^-i^mit 
mm^wt--Az--jv^x'^K^, imz-^\^xmL< 

Nyberg and Rueppel,"A new signature scheme bas 
ed on the DSA giving message recovery" , 1st ACM Con 
f. on Comp. and Comm. Security, 1993 iPM^tltz 

LXCO. ±lBNyberg-Rueppel:S-5(;Cij(tl);^ -y-^-'JU 

[ 0 0 1 6 ] OT. :^mmmL^^ii^^nm\comm 

(1) -ty^'-tcii.Miss 

p ^mm. GF(p) coTv^g tL^com.^ci tt^. -t 

y^-{±, iyX7-I.J^y^~^tLXp , q , g ^^-3- 

ty^^hhrnr ^ i^^^mimizmm^tifz^m 
mzmt^. 

( 2 ) :^~rAi,zx^mmm<7)^^i:'mm<^^»m^ 

[0017] m^mmmm-ti:^'-^At^. ^(nm. 
If fit ^£\mL. zii^mm lt ixmm^tnm 

(mod P)tcj;"9*aO-l.„ MC^ry^-^g^jLT. 
( 3 ) A{zXhm^'nm3Xfm%. 

[0018] ff- B (;W:g. iswiifi^^^fi&ff 

1. SLi:k&±figS-^.g.» 

2. mTi^?ii^&tTa„ =5rfe. ddtmjiam 
■xx:hh. 

r, =g i' (mod p) 

ro =m /Vi (mod p)"-(a) 

r2 ' (mod q) 

s -rs' X , (mod q)-(b) m\%-fh. 
[0019] 3 . Ji— rA{i(r2 , s) ^ . ^-Hf Bt^jl 

(4 ) ^— »fB(;j;|,gfiL/i^ -y^r->>-i0fl7C 
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1 . g y fl "^2' rj^m (mod p) 

Z^X\ ±fari{±r?5>y h^yffcllffm. (a) l,i^-v 

[00 20] ±ie#*w(i, ^mmix%->tzmmi 
tzm^Mh) {±iiiTc?)j;3tc6 ( = 3 ! ) mm.(^mz- 

ak = b + cx A (mod q) , (a,b,c) = (l,r2 ' ,s)<?)S^--- 
(b') 

[00 2 1] 

mm^ -;^~i^mMm^{znLx\±. (a) t 
( b ) mmfzibm^mm-h o , mii^iyt, r-^ 

recovery-equation attack using g and yA, signature 
-equation attackusing g and yA.and homomorpiiism at 

tack (^^st y A * mm I tzmkrm j r g > y 
^ >y^~=jm7mm^mAi J . vmmmm 

IffB-fe^^'JT^Sf^^. 1 99 5, iFiRtMy 
bergand Rueppel, "A new signature scheme based on 
the DSA giving message recovery", 1st ACM Conf. 
on Comp. and Comm.SecLirity, I'J'.Ji/slC'^'Nyberg aridRu 
eppel, "Message recovery for signature schemes bas 
ed on the discrete logarithm problem". Advances in 
crypto! ogy-Proceedings of Eurocrypt' 94, Lecture Not 
es in Computer Science, 950(1995), Springer-Varla 

[00 22] zti^izMix, mz^Kiyz-^mmm 

(redundancy attack) t^^^^. W^MM 
MtLi\ ^<^i}-'hh^'^i}^^mmmizl±pl±5 12h'-y 

6 0)z'yhmmmu^mm^tLi. ;toti^. ±.m 

r2 ' (mod q) <7)^X'l±. pl^XTXr^ ' \:M 

\Z^(ni^•k%fz~fW.rr^ ti<^\^^h. immt^Ol 

^nmuzh<nx:hh. 

[00 23]^, mmtfi—o^m^{r^ , s) ^^\iZ\^K 

tz)z%.m^{z^ (TM^icm mi,7tx^ I f)\ .ic^rc^ 

rr2=r2'+q (mod?) {^liltiZ^ rr^ hli 

in^^wm-h. ) 

mm=rr2X(m/r2) (iit;. mmtfi:. mCO^Srg 

m^^^z{rr„s) rmm-tt. zfi^^mi 



^r&Tmm^flTuL. A:b^^m^tLi-ztJi,'oXLto. i 

m^. rmmiAi,ztx^)tti-^ti}K'^^. 

[0024] ##iT't:. iWiC«i0llW&ll5 

mxm^^zt£ "9 , S^^^st tit\^t^j:<^j:ntz. 

[ 0 0 2 5 ] ^tT. zii^coz tii. mnmmm 

Ltz^^l,zh$>Xi±t^. mLmmLX^fzJ:ol>zM}5i 

^ti. zcofzi6zcomnm^x'^j:v^zb^^hi^'^rz. 
zmm^mimmm^, i^y^-i^mjtx^tc^^ 

m^) \z\imm'^^j:^^^t-b^ht^nX\^h . L-b-^L. 

L'o-^mmmmx-^^^ti}^mti\^b\^'ox. m 

[0026] zmMmizmimm}^.m 
^^ivi-z^m<^^m Lx^w Lt-h m^xtm 
m'ibi-h. 

[0027] 

(4. P ^mWibL. *ll#:GF(p) iOTC^g b L. ^coii 

it&q bL. GF(p) ±m^^iiim^ij^izt5\,^x . m 
tz\-^-x^m eGF(p) b^hb^. k m^mnm^zb 

imkb I . 3 5 .y h ^ > hri=g 1^ L , ri ' ^ri (m 
od q), m' -m(inod q) bl. ha, hb, hciWSMl , 

xz , xz , b-^z , ^mmbt^b^. m^^^. 

ha(ri',s,m')k = hb(ri ',s,m') + hc(ri ',s,m')x ^ (m 
od q) t^i^s mmx^ ^X'J LT V „ ; tl!,Z 

[ 0 0 2 8 ] S :^Wmziiif^^ ^y^-'J^jt^^ 

mzti>^ 'y^-'j-7x^^^immuz^ y^-'j^jt 
mm^uMi. ^'y^~'j^x^^bLx. p mmb 

L. WmG¥{p) tOTU^g bL. ^«f4a&q bL, GF 
(P) ±&m^tim^1f^lZi5\^X. W^rLJ^cV^^CSrm 

eGF(p) b-ftb^. k m^m^m^zbtnMb 

L. ri= (mod p ) im^'i^f&mmzmfia ^ -y 

h,X> hi:L, GF(p) XGF(p) ;&^A,GF(p) ^c^^ft^f 
fc^St^. ri tm ^f IZi^^mttziir, , m)&Ml^ 

[ 0 0 2 9 ] t :^mmzmim^i^^. ^ ■y^r- 

i^mSW^^Ji. EG (pM , E (GF 
(p) ) , E (GF (pM Ji-Ct^§:fll.. 
[0030] 
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TC^g tt. ^fOfim^q fct. GF(p) ±£«§^I|,W 

k m^^mm^zthmitL. 1-1= g'^ 
^^>mmzmh^^-^h^yvbi. gf(p) xgf(p) 

*^ii,GF(p) ^fO^fi^f t^hh%. 1-1 >m 

^mt/^f (ri . m) ^m^xm^mmmzi^n^^ -y-t 

[00 3 1 ] mim2(7)%mx'\i. m^z^fi?^ ) ±.(d?^ 

'y^-'jm7mmnzh\^x . p ^^s^l, r ^je^ 

litL, ^Pg#cGF{p^ ) c?37u£^g >L, '^i^aat^q h 

L. GF(p^ ) h-m^fihm^-)i^\zi5\^x. m^Ltz 

V^^C&m eGF(p t-fl-fc^. k ^W^^^iffiEt^t 
mmtL, ri=g k &3 5>yh^yhtL. GF(p 0 

XGF(p 0 *^Ji.GF(p 0 ^(T^mmfitL, GF(p 0 
i^^PISZ p,= {0,l,---,P^-i } ^i^^fi'S-Trfc-r-Sfc 

^iiL/i7r(f, (r, . Ill)) *-mi>\'if,i«i(:*^iti> 

[00 32] ilAf<Il3«f|0it1±, ^#t;GF(p) ±tO^ 7 

(p) iL^m^fifzmnmm^^ tt. e(gf{p))(7)7u^g 

tt. 'cc^f^m^q tL, F(GF(p))JiSa$lil>W=g.* 
jtt::iivrc. S-'KL>^:Vvi!.*mGGF(p) i:t-|>i;#, k 
&W^*;0^ffimt^tl.SLiCtL. Ri=kG=(r, . ry) i 
r?5'y h^syht E(GF(p))xGF(p) *^i^GF(p) ^<7) 
!i:«^Ffc-r^t#. Rifcm &tF IDSmtfcFCRi, 

m)^m\^xm^^mBmzinit^-v^'-'jm7t^^m. 

\z-th--bimwcLxv^t 

[00 33] imMA<^%mXU, m:E(GF(p^ 

y< ^v^-'jmjmmnzii\-^x . ?mwLtL. r ^ie 
mmt L, wPS#;GF(p^ ) ±5g«Sifi/-cftnffiii^E b 

L. E(GF(pr ))c?)7E&G tL, ^coem^q hL. E{GF 

meGF{pMtfl>t§,k& S^^t^iffiEt:: t ^ mk 
tL. Ri=kG={r,^ r, ) Sr =l S 7 V b t L. E(GF 
(P^ ))xGF{p^ ) *^/iGF(p^ ) ^tO^fi^Fit-r-g-t 
L. GF(p=: ) *^A,^RSSZ p,^c^^m&K:t^-&i:#. 
Rifcm ^Fit:J;D^mL. ^CDffi^Mt^Jr&fflV^T^ 
UC7r(Fi(Ri, m)) ^fflV^TS^^^WIt^iottl.-^! 

[00 34] mt<M5(7mmXU. mz^ ■y^-^JUlt 
Sg^t?)±t?)recovery-equation ^Wt^fz^. 

(±. GF(p) 3g, mf m, Mt/t:Zq= {0,1, 
■■■,q-l} 3t, jSl>'e t;ML, f (g t y ft d , niy 

A = ) s.v'f(g t y , J , mgo tiiji^r. 3^m, 

j , e *i 2 S ( ^K^J: 



[003 5] mm¥.(><^Mmxn. y^-^^fiTc 

MW^<JO_hc?)recovery-equation MMth tz^. 

GF(p=^ ) 3g, y^ StXm Mf^Zl , = {0,1, 

■■■,q-l} 3t, jat^e t;Mt. fi(gt y fl j ,my fl M 
at/'fi(gt y fi ^ , mg= ) 3Mit,j,e ^^2 

[0036] mim.7^Mmx\i. m^z^ 'y^r-i^m 

Mg^<J0±COrecovery-equati on JiC^J Hlji-f |> /ifc , 
W E(GF(p))3G mn A , GF(p) 3m MflZl 
, = {0,l,-,q-l} 3t, j&tXe t:ML. F(tG+jY s , m 
Xx(eYA ))&I>'f(K+jy ft, m Xx(eG))tCfcV^T. 3^ 

at,j,e //2{0c7)fti[5i;T#am (a^sii.^.ix^v^; 
tm'^tLx^^^. 

[0037] mmsammi. mm^z^^ 

fXTESW^CDJiSOrecovery-equation TJc^Sr 
ii^. ^MFifi, ECGFCp'^ ))9G &W a . GF(pi ) 3m 
Mmcz , = {0,l,---,q-l} 3t, jSyc ( t(tG 
+jY s , m Xx(eYa ))&V'f (tG+jY ^ , in ■ x(e(;))(C^i 

v^-c, 3«.,j,e >^)i2^i^oftSJ\;T^M■(:■#)S m 
[0038] mim9^w^mi. '\mzmz^ ^v^-i^ 

WtMM^cnljnhommv'phisml^^i^Wthtz^. ^ 
m GF(p) 3ri, rj, m, g^t^y ^ (:^L, r2=f(r 
1 , m) COjtft ^m=f - Mri . r2 ) f '^^t 1. 1 % . \mC0 2 
mmiU, i>^znLXi 'Hr,/g, r2)^0(m,g) Mf 

[0039] i**IMl 0i?)^BflT'{±. 'y-b- 
i^'flTCa^i&i^Ji^Ohoinomorph i smljcS §r MM-f Ifzih^ 
^ftfiti, GF(pi- ) 3ri, r,, m, gRUy , tML, ra 
=f , (ri , m) Oitfg^ i[i=fri (ri , ) X^mt^ . H 
m^02^mMit^, ^/-t^^LTfr^ri/g, ra) ^.^ 
(in,g) &yfi-i(ri/y ft , r^) ^^{m,y, ) 

mmtLxu^. 

[0040] msm 1 1 co?tmxu. mzmz^ y^- 

>^fl7uSS^<?0±C?)homomorph i smlisM & Uliit" I. v^cfe , 
^{IF a. E(GF(p))3Ri, Y ft RV^G Mt^'tGF(p) 3 m 
RUr^izMt. r2=f(Ri,m)i^itfi^m=f "^Ri.ra) Xi^ 

G, r2)#0(m,G) at/^f-i(Ri-Yft , *il>{m,\) 
bti:t^b^m.hLX\^h. 

[004 1 ] if^IIl 2<r)%mXU, n^zn^Z^ .y^r- 
>'M7USlg^c^ Jic^homomorph i sml5c* ^ mii-f I, ft , 
^{iFiti. E{GF(p'- ))3Ri, Y ft SI/'G Ml/'tGF(pi ) 
3 m&t/Vjt^ML. r2=f(Ri,m)iOit{i&m=f -i(Ri,r2) 

(Ri-G, r2)^^(iii,G) S.Wf-i(Ri-Yfl , ra) ^0(m,Y 
ft ) tiSit^^St tTV^I>„ 

[0042] m^mi 3(r)wnxu. m^z^ -v^-'Jit 
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7CSS^r<?3_h<?3r eco ver y-equat i on , homomorph i smJfeS i 
mm-hfz>^. W li. (r, y)^r +y(GF(p) ±CDM 

quation, homomorph ismlj^^^ IMIjSt"!) '^i$.iU-± , 
(r, y)^r +y(GF(p^ ) icOM T&mMl^Zbi: 

[0043] if*il 1 5<7)9imxU. mz:A '/-fe-^-fl 
TCMS^^O-h^Orecovery-equation , homomorph israJSc^^ 

X. (R, y)^x(R)+y(GF(p) ±cr,1}m) X'^m^il^Z. 

kmmkixv^i. tmmiecowExn. mz^-y 

■fe— i'fSTCiS^^sT'^Ji^Orecovery-equation, homoraorphi 
icSrfflV^T. (R, y)^x(R)+y(GF(p- ) ±<7)Jni:) 

m^ii^^tmwitix\^i. 
[0044] if ^11 1 i^mnxu. mz^ 

7T:MW-^^0±^0recovery-equation , homomorphismJ^j^Sr 
mm-tltz)^. ^ft7r(±. {«! , «2 , ■-, a, 1 * 
GF(p^ ) iOGF(p) ±COmmk-tlkt^. (;F(pr);0;L;x- 
XiCfi +---+X r ( Xi, X, cGF(p))(C*tL 
7r( x) =Xi+X2P+ ■■■+Xi p =^-1 

[004 5] IfiRlM 1 8iO|gBJ-C-{i. GF(p) >y-b 
ix . ^^Mii£y , =g=">fc L. M^Lf^V^^C&m eGF 

(p) t-r-g.t#. k m^^mMi>zki>nMhL. r, 

&=JS .y byyhri=gk tm (;j:i9it»:$^il.GF(p) ct) 

TCtt. ra' =r2 (mod q) kL. ha, hb, hc^Wm 

z , xz , xz , *^ibz , ^c?)^f||t-r-g.t§. W^J^ 

Sr, ha(r2' ,s,l)k =hb(r2',s,l) + hc(r2 ' ,s,l)x ^ 

(mod q) ^-hsmMx% I. J; a ^zmm-i> <i t 

[0046] if^II 1 9C0^mXU. mzGVip^ ) ±.C0 
*l*tL. r ^lESmtL, *-pi#;GF(p^ ) i?)7t*g k 

L. ^t^ea^q tL, GF(pi ) ±j^m^rLim^ij^ 
^ztiux. m^^A mmmi:x , . &mmiy , =g^« 

kl. m^Lfz\^^im eGF(p^ ) t-TSt^. k m 
^m^m.l<Zktm.kL. rj^nS-y h^yhri=g k 

km t i Dl+mSixl.^Pfi^Z p.OTUt r/ =r2 
(mod q) i; L. ha, hb, hciW&M'L , XZ , XZ , /j^ 
, ^i^^mt-fSfc^. m^^i. ha(r2',s,l)k 
= hb(r2',s,l)+ hc(r2',s,l)x j (mod q)t^^s ifiM^^ 
T^tXo mm-fl ^ k mmk LTUI. . 
[0047] if*lM2 0(D?^mXU. #t:E(GF(p)) Ji<7) 

mmkL. *Pfi#;GF(p) ±MmwzmF]mm^:E k 



L. E(GF(p))<7)7C&G kL. ^iOea^q tL, E(GF 

{p))±^m^tlm^1^^^zi5K^x. m^itz^^^^m 

eGF(p) k^tk^.k i:m^mti^i£M{zk inMk 

r2&aS.7f^yVRi=kG tm l^zX^im$tLlGV 
(p) (7)jtkL^ rj' =r2 (mod q) t L, ha, hb, hcSr 
, XZ , XZ , ;^j^^.Z , ^^COmtki-lk^. 
m^^^:, ha(r2',s,l)k = hb(r 2,s,l) + hc(r2',s. 

1) X , (mod q) t^^smmx'^ I. j; 0 mm-^ ^ k 

^WkkLX^^l. 

[0048] msm 1 mmxi±. mmG¥{p^ ) ± 

mmkL. r ^iESIitL. *PI#;GF(p^ ) ±Sg«§ 
ii:tt«nfill^E tt. E(GF(p^ ))i^7t&G t L. 
fiiC^q kL. E(GF(p^ ))±^«§iiSW^^5S;tfcv^ 

W^t-tV^^C&m ^GF{pr)k-tlk^. k 
*iffimttl.SUCtL. r2^3S>yh^>-hRi=kG tm 
(ClOltll^il^^RB^Z p.i^TCt L. rs' =r2 (mod 
q) hL, ha, hb, hc^Wmz , XZ , XZ, ^^^(^1 
, '\CO'^mktlkt^. ha(r2',s,l)k = h 

b(rX,s,l) + hc(rX.s,1)x „ (mod q) i)^(^s mfM-X 

^ixd mm- 1 c k mm t l -c ^ s , 
[0049] it«ii2 2mmxu. mz^ -y^-i^m 

7CS§i&iO±<7)signature-euqaionIi(S?: Ill)it"l> 
46. ^?0ha,hb, he {i. r2',s ^Z , C^TUtl-gt^, 

,*rUT. <:?:cO--:?t0^ffl. ha(r2',s,l)=ha(rr2' ,ss, 
1), hc(r2',s,l)=hc(rr2',ss.l) 60t |:hb(r2 ' ,s, l)-ha 
(r2',s,l) =ithb(rr2' ,ss,l)2. ha(r2' ,s,l)=ha(rr2' ,s 
s,l), hb(r2'.s,l)=hb(rr2',ss,l)(5Dt§hc(r2',s,l)-h 

a(r2 ' .s,l)=^hc(rr2' ,ss,l) m^-fi>Zk mUk L 

[0050] if*Il2 SffmmXU. mz^ -y^-^JU 
7uSg^c?)±COsignature-equation , S^m^kM^EMt 
htz^^ ^fiha.hb.hcfi. ha(r2 ' ,s,l)=r2 ' , hc(r2',s, 
\)=skL. hb(r2',s,l) r2'=rr2', s=ssc?)t§, hb 
(r2' .s,l)=hb(rr2' ,ss,l) ,r2'=rr2', hb(r2 ' ,s, l)=hb 
(rr^'.ss.l) a^k^, s=ss, hb(0, 0, 1) ^0, ^ffifct" 
IkrmWkLXX^h. 

[ 0 0 5 1 ] m-m.2A(rMmxu. m^z^ -y^-'Jit 

7uSSiS<7)±<P0signature-equation, MPX^^WMt 
lti>^. ^ftha.hb.hcti, ha(r2',s,l)^, hc{r2',s,l) 
=r2'fcL. hb(r2',s,l) (4. s=ss, r2'=rr2', Ot#, 
hb(r2 ' ,s, l)=hb(rr2' ,ss,l) , s=ss, hb(r2 ' , s, l)=hb(rr 
2',ss,l) (/)k^. r2'=rr2\ hb(0, 0, 1) ^0 ^'Mtz 

[0052] it*lM2 5mmXit. mz^ ■y-fe-i-'H 
7tMSiS<7)±<7)signature-equation, JrWicS^H^i-r 
S/i46. ^ftha,hb,hc{4, ha(r2 ' ,s,l)=s, hb(r2',s,l) 
=r2'i;t, hc(r2',s,l) rg'^rrg', s=ssiOi;#, he 
(r2' ,s,l)=hc(rr2' ,ss,l) , s=ss, hc(r2 ' ,s,l)=hc(r 
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ra'.ss.l) r2'=rr2'hc(0, 0, 1) *0 

[00 53] it*3l2 6C0%mX'li. mz^ -y-b-^-'a 

7cMg^i0±^0signature-equation, JtWicS^ HDlt" 
l./iis^, '?ftha,hb,hcii. ha(r2 ' ,s, l)=r2 ' , hb{r2',s, 
l)=stL. hc(r2',s,l) (i, r2'=rr2', s=ssOt^. he 
(rj ' ,s,l)=hc(rr2 ' ,ss, 1) , r2'=rr2', hc(r2 ' ,s,l)=hc 
(rrj'.ss,!) (7)t^^ s=ss, hc(0, 0, 1) *0 ^:Wz't 

[00 54] mSm2 7C0^mX'i±. mzj< -y-t-i^'fl 
7CSSiStO±iOsignature-equation, JtW3C»& ISDit' 

^fiha,hb,hcii. hc(r2 ' ,s, l)=s, hb(r2\s.l) 
=r2'tL, ha(r2',s,l) r2'=rr2', ha(r2 ' , s, l)=ha 
(rrj'.ss,!) iOt^s s=ss, s=ss, ha(r2' ,s,l)=ha(r 
r2',ss,l) r2'=rr2\ ha(0,0,l) *0 mtz-f 

[00 5 5] if^iS2 sco^m-cn. mz^ -y-t-i-'a 

Ttmrn^^- Kc^Js i gnat Lire-equat i on , tWl^^ iWMt 
htz^. ^fiha.hb.hcti, hc(r2 ' ,s, l)=r2 ' , hbCrj'.s, 
l)=stL. ha(r2',s,l) {±, r2'=rr2', ha(r2 ' ,s,l)=ha 
(rrj'.ss,!) <^h^ ^ s=ss, s=ss, ha(r2 ' ,s, l)=ha(r 
r2',ss,l)cOt#, r2'=rr2\ ha(0,0,l) *0 ^Wz-f 

[00 56] mm.2 9<^mitu. mz^ y-t-i^'fx 

7nMW^C?5signature-equation, ibMl^cSS" [Hi^-t -Si 

^fShb(r2',s,l) ii, hb(r2',s,l)=r2' Is t 1 'C 
S«§3fil.;h&i^itfcL-cv^l.. it^ll3O«l&0J-C" 

(±. #l:->< -y-tr-i-'aTCSg^COiCOsignature-equati 
on. J:tW:fe»^lfl]ji-rS5ti6. mmhiv^' .s,l) hb 

(r2',s,l)=r2' Xs +1 X-im^fltZb^W^bLX 

[00 57] if*JM3 1 <D%m-r:\i. mz^ -/^~=JU 

7uMW^iO±COsignature-equation. JrbWifc*?: 0)St 
hfz^. ^fihc(r2',s,l) {4, hc(r2',s,l)=r2' +s + 

#t:;'< 'y-fe-i^mTtiSg^OJiCOsignature^eq 
nation, ^1*, ^ffihc (r2 ' , s, 1) 

i±. hc{r2',s,l)=r2' Xs +1 T-7E»§tll..It^fr^ 

[00 58] tWMS 3<n%mX\±. mz^ -yfe->?fM 
7^W^(7)_h(7)signature-equation. JtW^fe^^ 111)®^ 
l-fc*^. ^ftha(r2',s.l) (4, ha(r2',s,l)=0 t^^M 

^«B#rBi ) h^t mmt lt v „ if* 

113 4 ff^WRXli. m^Z^ -y •t-i^fl7t:SS^<7)±(?)si 
gnature-equation, imm^mmfhtz}^^. SIJS[k 

^.y^r-vvy^^'5^:Tt^-s$^^^r2ts=&^^;T•'ff-a: 

Sixl>s tlj^LT, ha{r2',s,l) ^0 T'^Sidt^K-^ 
X<^^ZhimmhLX\^l. 

[00 59] it3f<Il3 StO^BJim. -yfe->^fl 



7CSgi&i7)±<7)signature-equation, itWicS^Higf 
SJtft. ^0ha(r2',s,l) (4. haCr^' ,s,l)=r2 '+s+l "C' 
«)l.;t&#®fctTV^I.„ a5RJl3 6i^MHJT{4. ^ 
liZyi -y-fe— i^fl7i:SW^<7)±i7)signature-equation, it 
W3C»&[MljSt-|>/i*. »a(r2',s,l) (4, ha(r2', 
s,l)=r2' Xs +1 fS)!.; t^iftSt LTl^l.„ 
[0060] iMll3 7£/)%0JT14, ^^tCGF(p) ±£/)^ 

atL. q ^ (P/4) <qt^l.iEmt ^KBft 
GF(p) tOfiiC^iq h^j:h7t^g t GF(p) ±S«§tL 
tm^1j^iZi5\-^X. W^t/SV^^C^m eGF(p) tt"!. 

t^- SLSk rJS'yf^yhri^g k tm tcj; 
fiic&i'Ll>GF(p) c?)7nr2*\ 0<r2<q t^:l>J;att 

[006 1 ] ft*iH3 s<^mmi. mz^^iv- ) hco 
}<-j^~'jmmM^<D±.aym.iwm-htzm. p& 

mWitL. r ^lE^fcL. q ^ (P/4) <qi:5rS 
iEmtL. *KftGF(p^ ) <nm.th ht^hjt-ki b 
L. GF(pr ) ±S«§^ll>S^^T^iCfeV^T. W^t/^^ 
V^:S;&in eGF(p^ ) btlbt. SLI^k 3S'yh;< 
^-bri^gi^ tm tcj; OlDS^tll-Z {0.1,-, p 
} <^7tntK 0<r2<q t^l-iatCt ±fE® 

mm'&^fitzv^m^-^m^^hz t ^s^mt lti^ 

[ 0 0 b 2 ] ]Min3 9iO?6H0-C{i. ^H::F(GF(p))±i^ 
^•y-lr->^'fl7EMS^«_h«iS(^&ll])Sf p i 

mwibL. *-iif^sGF(p) ±.^m^iit:mv\mm^ t 

L. E(GF(p))C07C&G bL. ^<n{m^<\ bL. E(GF 

(p))i.'m^fim^ii^^zii\^x. w^L/iv>^&m 

eGF(p) b-^^b%. 3S -y b><ybri=g 

^tm t:J;Dm$ixl>GF(p) t07Ur2*\ 0<r2<q t 

[0063] if*ll4 0(r)mnXU, iftt:GF(p^ ) ±(7) 
;'<'y-b-i;fl7uS!S=&<7)J:iOifc»&0jSt--g>3^ciO. p & 
*Sci:L, r ^lEmtt, ^RS#;GF(p^ ) ±5g«$^i 
/^cflRftfl^E tL. E(GF(p^ ))i07C^G tL, ^t^fi 
a^q bh. E(GF(p^ ))±g«§^l>W^^sttCfel^ 
g^L-^cV^:S;&m eGF(pr ) tf^il^, » 

3S>y h;«tyhri=g k tm H j; DmSix«.Z p, 
= {0,l,-,p^-i } (7)7D-2^\ 0<r2<q t^rSiat 

b^. htmmmm^titzr,im^^^zm\^h^bi 

WB.bLXV^h. 

[0064] it*ii4 1 (Tiwnxu. mzmY{p))±-(n 
A'v^~i;m7mm^<^±.<n^mmmhtz>)b. mvi 

mm 14. TtcnmWfip t=5rSGF(p) Ji<7)f|p3M^ffl 

\^h^b^:mmbLx\^i... m^nA2(r)%mxu. # 

^titl^^m tcML. m WN-y^'j.mihashdn) 
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TC^g tt. ^C^im^<\ fct. GF(p) ±£«$^|,^ 

A=g="*tL, W^L^cU:X^m eGF(p) i;t-|>t#, k 

t ri ' (mod q) , m' =m (mod q) h L , h 

a, hb, hc^Mmi ^ Xl^ XI ^ ti^^Z , 
b^t^f^. m^^i. ha(ri',s,iii')k = hb(ri',s, 
m') + hc(ri',s,in')x ^ (mod q) *^^>s ^iftm-C't I. J: 

[00 6 5] if5f<lM4 4(73||0J5T1i, t#(;E(GF(p)) JiC?:) 

mmb r ^iEmfc ^rPi*GF(p'^ ) c^tc^s t 

^C7)f4i5:^q fcL. GF(p^ ) ±m^timi,1j^ 

bl. nf<Lt.:^yX^m ( GF(pr ) b^hb^.k 
i&^/ji ffi bimibl. 3 S >y b ^ y b ri =g k 

GF(p^ ) t^^wmi ,,^mm7tbtibt. 

ri' =7t{ri) (mod q) , m' =7i:{m) (modq)tL. h 
a, hb, hciWmz 5 XZ , XZ , 3&^^>Z , ^CO^m 
tt-Stt, ha(ri',s,m')k = hb(ri',s, 

m") + hc(ri',s,m')x J (mod q) !&^^>s /&i|t^f# ^ j; 

[ 0 0 b b ] MMmA 5T(d, ^K::li(GF(p))±i') X ■/ t 

*Pfi*GF(p) ±^aS^I^flP3ft^&E fcL. E(GF 
(p))i07cK tL. ^mm^l bL. E(GF(p))_hS« 
^ilim^li^l^Zii^-^X . m^M^^^tn eGF(p) b 
1-|> t # . k ^W:g^//f£l;tct SSLfAt :3 5 >y b 
^yhRi=kG tL, E(GF(p))^^i^GF(p) ^O^^^pt 
tlb^.rV =p (Ri ) (mod q) , m' =m (mod q) 
bL. ha, hb, hct*R|:iZ , xz , xZ , t^l^l , a. 
CD^mt-rSt^. m^^^. ha(ri',s,m')k = hb 
(ri'.s.m') + hc(ri ' ,s,m')x ^ (mod q) fj^^s tiWi^ 

ii^{zmm-h^b^:mmbLx^^h. 

[00 67] 11^114 6(n%mX\i. #(CE(GF(p))±c7) 
mWb L, r ^lESatL. ^rPfi*GF(p=^ ) ±£«§il 

tdmm^^^ bL. E{GF{p^ ))<7)7u&G tL. ^(7){i 
a^q tt. E(GF(p'^ ))}L'&m^titm^-^^{zii^-^ 

X.. m^Ltz\^X^:^ eGF(p^ ) b^hb^. k ^W^. 
;&;&ifiS(:tl>SLIAt L. 3 b^ybRi=kG bL. 
E(GF(pi^ ))*^feGF(p': )^O^mS-ptt-'St L. GF(p 

M 5&-^>*M p,= {0,1,-,P^-1 J^CO^m^TTt 

•ri.fc§. ri' =7r( p(Ri)) (modq), m' ^7r(m) 

(mod q) b L, ha, hb, hc^^Pfi^Z , XZ , XZ , 
^.^,Z , ^ffM^btlb^. m^^^. ha(ri',s,m') 
k = hb(ri ' ,s,m' ) + hc(ri ' ,s,m' )x j (mod q) t^^s 



mmx-^ i,zms&-t6 b mmb ixu^. 
[0068] mmA immra. !it(:E(GF(p))_h<;D 

p{±. mnmmcDi^mwmLKiiymmmmim^-^x. 
R ^x(R)^L<tiR^y (R) x^m^tii^bmm 
>LTt^§„ ms0A8(D?%mxu. mzE{G¥(p))±(7) 
A •■/^-i^mjmm^ff^i.ff^^minwfhfz)^. 

TTii, {«! , , a, ) ^GF(p^ ) W(p) ± 
COafit-f'g.tS:. GF(p'^ ) C07Cx=Xiai +'"+x , 
a, ( xi , X, eGF(p))t;*tLT. n { x) =Xi 
+X2P+ -+x, p =^-1 X'm^^fih:ibmmbLX\^ 

[0069] 

( m 1 mm ) mr. *^Bj£^»jt:s-c>-v ^xmmt 

■fh. t-f, 'mrAV^}VMtmm.(nmmzr)\\x 

[0070] 06i±, *;^0flAW§ill.'iVrjflTV V9 

)vm'mM\Mm^xhh :. Amzi^v^z. wmm 

h . 2 «4t ^ i>":?;WjlfilMliKT'Si 3 - 6 i± , i^^lHT 

^s/^;wifiiiiii2tcMgs^i^c^-rs* (iiiT. * 

XrAM7^-^t LT. 2^5 1 2h'-y fT'^SfL 

sump, 

gq si (mod p ) 

i:^Sft/h(7)^ (fiic) q*^2 5 6h'.y VOMW^X 
^I.SiCg. GF (p)±T-f (ri,m) =ri +m 
(mod p ) ^lX^C7)m^m -i;^)^'f -1 ( I'l , f ( r 

1 , m) ) =m (mod p) ir^ttzt^ 'yt-'J-^X^ 

, ZgXZgXZg*^^>Zg^£^^ftT-\ ha (r 

2 s, l)=s, hb(r2 ', s, l)=r2 ' 
+ S + 1 (modq he (r2 ' , s, 1) rj ' Sr 
?t3t-rMitha. hb. hc^v-XT-AVN-^P^-^t^ 

[007 1 ] mz. mei^zT^TMmmmm 1 1^-- 
3--6mmz-?\^xmm-ti. min. mmmmm 

1 1 J: 'O^m^tlfz I C;^?- F^i— f'e#*^{1s)jgL/-c 
V^T. 1 l{SMilf^^W*S#gPT'J5S„ 12«, if 

3xh6. i6i±. m^^mmx hi,. 

[0072] 13Hi^mmimUl3mscr)2^ CO 

pmb-rmMmmx$)6. i3 2{i. mt<WM 

OtULgPT'J)'^^ 1 3 3ii. |5]t<mgPT-fel.„ 13 
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if- 3 - 6 ( *iiT-ii^-if A ) t^i^m^mmmco^f 

[00 73] i.^r»A^M§Pi 4{±. mmi¥mi 3<o 
6(4, mmi:mmmmco'mi,zmtxmLd 

[ 0 0 7 4 ] mmi^^^ 1 3 j; S^WiOf^ 

(^n'imy tmff^MsMi 3 1 tsKoaiLgpi 32 

COn£i£ht--g.fiJ^iE'figEl 3 1(4. g. g2 . g* . 

gs ■■■ms<^2<7)^K%m(^Pimk-tm^si . s 

1 K g = 2^^,(i:\ i = [log2 ll]=3t^0, 
23 <llt^:l./-cA, g, g2 , g* tLT2. 
22 . 2* mzMmiSi , g2 . g4 i:LT 
2. 4. 5S:ieiitTV^|,« ffiEOffit^l 3 2(4. « 

m^m i2f)^^2 mmx-mm^titzmmmm^ 

^tDfi-C-l*iTto|fftMJC-t-g.gi . g2 . 
gi ^KDmt-o A^^^mMzt-^XM 
m^l^Z-fl. ^xa=l 0 1 (1 Ojtt0 5) fc-tSo 1 
f5t3f4(#. g£02t00^t 2t02^) tCl^^ir-^T 

-r» *^gE13 3(4. MX0£tiLgP13 2coKDttlL/i 
a^SHt-^i^-fr^ „ fflSSB 1 3 4 (4. 1 33m 

m^mnxm. ^mi^^i^^. ±nmmmm 

T-^-t*i^(4\ 2" = 25 =2X2* =2X5 = 10 
(mod 11) t^S„ -eLT. i(7)fiJ^*i:r-HfAc?)&g^ 
itfc$^i«.. =5rfc. ^Hffim-gc^^^^^fJ^SfflL 
Tl->^<7){4. gs . g6 ^i7)S&«ffl-ri.<7)j:^)*.-^l 

mmmifm< . immm^ 2mxmi-^^t izhh 

^tzhc^)Xh^. 

[ 0 0 7 5 ] j^tc, m^m oMfi^tf o^-if Aio<7) 



tl^^o II|9l:fcV^T. 3 1(4r2 mm^Xhh. 32 

ii2imim^±3x$)i. 3 3{4ri jmsp-e?)!.. 3 
4(4. afi:5: (m) Ai)SisT*i>„ 3 5(4. fmm^x 
J, I.. 3 6(4. qie'iigPT-$,i.„ 37(4. mm3xh 

ttz. 331(4. ri # fiJ^IEMa^T- 
l)l>„ tfz. 3 3 2(4. ^t<ffiE'9aita^T-J^I>. 3 

3 3(4. nt<mMxhh. 3 3 4(4. ^t<fims 
fj^s. 3 5 1(4. imm3 5mm'M.mxhh. 3 

5 2(4. |5lt<. mmgPf^bl., 3 7 1(4. »fP3 7 
f^C0qi^AtiiLtil^lgE3 7 1^^51.0 3 7 2(4. I«lt< 

^\%miXht. 3 7 3(4. [5]t<itKaST-J^I.„ 
[0076] HI 0(:i3V^T. 3 8(4SKgPT-$)l>o 3 
8 1(4. SKgP3 8f^Ok-l?|img|5T-^)«.o 382 
(4. |SIt<r2 +l?mgPT'S)l.« 3 8 3(4. |SIt< r 
2 ^.WMMXh^. 3 84(4. |Blt< + l + r2 
xa MSaJT'^)-?., 3 8 5(4. |5lt<. St\%W.Xh 

[ 0 0 7 7] mn. ^XxA7N"9;'<-^tOA¥ ( a 1 ) 

&L^i:«^:)ifttA%$ii^> (a3) ... r, ^i)MP3l 

(4. m^mm%mkzhfz o . 2 mm.mM 3 2 1 m a 
^^3 4<^'f^ffl^i^. ffl«t. fiwj-ri.*\ 'm 
ts:mmL%mn,'if^ . mtxx-f)mA\±. mm 
imfzi^<7)X. mm r^A(4, ■^it rr-njit-t.. «ts# 

■^■(403-3 58 1-1 1 01 «],^ffiV>i1% ^mco 
X»^^-Hf(:J;^Aii$^. (m) ^tt-l. 

(a4) „ 

[0 0 78] 2mnMmM32l±. aS-yh^ybf^ 

fcit0/-ca6. %fi0B#^i,SlS^^(cjSfflStil.« (a 

5) 

ri ?mgP3 3[4. ^4$fL/i2jlSLmk&i,i;tri 

= gk (mod p ) <7)Mi:(c J; 19 . ri Sr^ftl,, ^cotz 

io. amfflM*#(:*3(tsgc?)2" c^p^ffitt-i>fj* 

lE'ia513 1. ffiKOtiiLMl 3 2. *^g|I13 3. fij 
mgPl 3 4 t|l]t«fi£{4sffl^^t-fJ^IB'ISIP3 3 1 , 
]lX*9ttiLi53 3 2. !^l:i53 3 3. iM3 34^^L 
TV>I., (a6) 

fmmmsii. r, imm3xim^tifzr, tm 
3 4 xmmit^tifzmmjcm ^ 1 1:. ^ -y 

■fe-i^'VX^'sef ^ffifflLT. =f (ri, m) (m 
od p)<:0?ii:^ffV\ r, (a7) 
^i^/Sis^. (mod p) ±X(Dr2 =ri +mCr,1aM-i"ft 

omM.^3 5 1 1. m(^P^mt^m^mii!b6tz)^ 

P XCOpmmd 352t&^)tLTV^|,. 
[0079] qfaiigl?3 6(4. ^ ^.*^tfeSiM:i-Hf (3 
j; D A^J § tL/i g ^ ^ ^ U - CIB'i L T u !> „ #f ^gp 3 

7(4. fmmm3 5i^^^xti^tifzr, tqttoA/wt 

K&ffl.^ (a8) . rj *^'qiil±ti^(4. fraifOjL^ 
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[0 0 80] ^<7)mmmfz. r, mm33iii. 2 

mmm^m 2 mmm^j:6mm^^^j:^ l^t 

3 4 I^ZXtl $tiXV^h mm^m t T- f MSc^gP 3 5 iZ 

fmmim^^t e. ^tmtc^r, ^^^^ st;qt 

IEfc^l>i-C-«D3it^^TS-ti:l,, if^. q-r2 *JjE 
t^^lif, ^iOr^ &SKg|53 7/\aj:;l3-ri., tfz^<D 
tz^. Pl^i53 7{4. qif;^tiiLgB3 7 1 t5l#i[f|53 

7 2ti[:Ka?3 7 3k^^)iLTl^l>, ql5!^aiLg|53 
7 1i±, tOA^*%l>fc qlB'ltS;3 b/j'i'^qiOfa^ 

is^^^tHL. m%U3i2{zm.m^, m%m7 2 
3{±. mnm 1 2m^fzm^oi.^'\^j:i^ifr^ 

[0081] SKgP38{±, W^j^sKs ( r2 +s + 
1 ) + r2 X, (mod p ) <7^m%{ZX 0 . WMn^t^j: 

-/-fe-i^-^-f^jjic-rs ( a 1 0 ) , m 4 \,z7kf^ 0 

1 {± , 2 'mmt'^m 3 s 1 r ?£^k ^i/-- , ^ t t ^ 

5Efc^^ht^o/ig^k:0^^>l^a[|;±|>„ 

[0 0 82] |5lt<. r2 +lMSif3 7(±. A:^]$il 

/ir^ tl&M;il., ^t<. r^x^ ?iS:g|3383 
f± . 3 7 /j^ A^ ^fitzvt t HtS L^v 

Ifi'igPA^^^Al^J^^ii^cxs rj +1 + 

rt Xfl ?g^gP3 84(i. r2 + 1 ii^gp 3 8 2 A 
^S^i;tr2 + li:r2 ^ii:g|53 8 3;i-^>ADS^l 
fzr^ xs tc^ffi^^ftS, ^cO|P^bt-r.S. 
sif»:i338 5ii, k-ljSt:a53 8 1;&i*ft/^at r 

2 +l+r2 ^iSg|53 8 43^)^^RA^^bt^^5gfflL 

s ■ a = b (mod q) &3t^^s ^^-^'V >y K 

[0083] JiLhiOi g^&*46Sfl!l(7)i-Hf B 
(rs , s) ^>m3tfcLT3lfi§^l^;tt^ 

(all) 

HI lii. W^:X^gftL/Si— tf'lMcoSg^J'PIcOi^ 

ii^^fHT'?) 0 . HI 2\±mm^hh. -im\.zii\^ 

X. 4 l{±gfii5-C&S„ 4 2{4, JB^gET'^^S. 4 3 
^WmX^hh. 4 4(4. yaiatlg|?-C3^l.„ 4 5 

ii. r2 iB'[igPT-$)l>o 4 6(4. sIBIigPTS)^, 4 7 

^immxhh. 4 8i4. +s + ifii:i5T* 

4 9(4. yfl (mod p)jil:a5T'S)l.„ 4 1 0 



(4. gs (mod p)?ai:g|3T-^fel.„ 4 1 li4. y 

, ^2/= (mod p)?^S:i5T'J,So 4 12(4. g(r2+i^s)/s 

{mA^mmmxhh. 413(4. ri ^g(i2+i^s)/s 

yfl ^2/s (mod P)?mgPT-S)l.„ 4 14(4. f-iMSii 

xh^. 

[0084] mtUA 1 (4. mm^^^um:^-^ . 

4-Ai;^§. (rs , S) ^^tth (b 

1) o mmA2\i. ^mfih-^tzMi^^. v., -^m 
(b2) . m:h-mm:\,<ntLxwm-th%i 
miVs a ^ < 'm\iz^(mmx^m-iiK jEr^(m(f 
^m^^^m-^ (b3) , i/citfo^ft. jifii!!^ 
-^^■tfnn:< qfaiii54 3(:S)^.^M::ftq^ia'fiUTv^ 

yfl IS'ltil4 4{4. 3iftmfS;§J;'9i.^Pf1§iX!^cy 

[0085] gfaiigB47i,. I5it<3b^>*^ti6g&ia 

liLTl^l.^ r2 ia'ligP4 5(4. JEffigP4 2*i-|EIIW 
Ucr2 &fB1iL. siaiia54 6{4|5lt< s&fBSt- 

^i3. r2 hs<n%m\i.. %mmfz-mtwh\z 

m-^%t^:^flh. r2 +s + UI»:gP48{4. IBS 
§154 5J; sfa'[ig|54 6^^/^f^imr2 i: s &^^tH 
L. |Q»:t-r2 +s+l^^ft|>, i/s (mod p)M 
S:a54 9(4. yfl ia'ligE4 4j;)^^,yfl ^ : Siaiii?4 6 
ii-hs^m^^\.Xy^ (mod p)&ili:-rS, gs 
(mod p)?g^gP4 1 0(4. s|B'ltg|I4 s g|B 

iiaP4 7*^i^g^is^aiLT. gi/s {mAv)^'mt 

yfl (modp)M»:a54 1 1(4. ia'S^4 5 
;i)^^>M;^aiUcr2 tyfl (mod p)^?mi54 9*^ 
^>ii^^ttiL!^!yfl (mod p)^i,fct:) , 
(yfl ) ^^2 St. S(:^(7)p^-^t-rsfiJ^& 

g(r2M.s)/s (mod p)M»gP4 1 2(4. + 
S + l?iga54 1 B^^^;.!', +s + l^fI.?^ftiL. g 
(mod p)Mt:g|54 1 0*^^.M^aiL!^cgi''s (mod 

[0086] ri =g(r2.1.S)/Sy^ r2/S ( „d p)^ 

gE4 1 3(4. yfl („d p)?it:a54 1 1 fOMiligm 

tg(r2U.S)/S („od p)?imi54 1 2C^igEfS*t?i^ 

ri =gCr2 + us)/Sy^ r2/s (mod p)i0^mtJ; 

0. ri (b4) „ fi r4iiM4i4(4. mi 

f-i&ffifflL-C?ii:r2 -ri ^fTV\ m^5j<^S (b 
5) , 

[0087] micoffi^tcj; . ^-rB{4^-TAi^ 

L/Syfl l^zmmmW^y^, ^a'5TUl>c^(4-i— 
A(50^^»-fS) D . t/iiCOXa SffifflL^i-uPIDya ^ffi 
MLTC0iELV^a-^t=SrLi(4'l^. itfO:^^*^. jIM^ 

(4. mtHz^-^Am^x-h^ tmii-ti ( b 6 ) „ 

ftl>afi^»I. :&a^OlM^C.t(^tT^O. st^S 
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[ 0 0 8 8 ] H 1 (i. ^(Dmim'^mx-mmitzmm 

{ 1 ) ^yi'-^ziimMk^ 

p immtL. GF(p) (7)7tis tL^ofiic^q ti- 

[0 0 89] GF(p) XGF(p) *^^.GF(p) ^CO'WWii Sr. 
f(ri, m)=ri+ffi (mod p) 
f cOjt^^ftf ^ 

f -i(ri,f(ri,ni))= m (mod p) 

tL. ZqXZqXZq*^/^Zq^<7)^ft ha , .h^ St , ha(r 
2',s,l)=s, hc(r2',s,l)=r2' > L, 
hb(r2',s,l) =r2' +s +1 (mod q) 

ha(r2' ,s,l)k= hb(r2',s,l) + hc(r2 ' ,s, l)x (mod 

q) 

[0 0 9 0] ■fey^'-fi, > XxAA°7;<-:5't tTp 
, q , g , f, ha, hb, he i^mtl. ^C7)-]m:i)\ 

( 2 ) ^-Tt J;§w^M^i^of^46^oi}^ii^of^fi£&^;'■ 
•fe y ^ -^ifgS L ;t 

[00 9 1] :i---9-'Aj&i. ^ ^y-b-i-msw^am^ 
mmy, =g^« (mod p)^^^L. ^^Lfzmimt 

( 3 ) :3--TA(C 

[ 0 0 9 2 ] 2 . OT^O^|^&Ji^;^f ^ » 
2-l)ri =g 1^ (mod p) , 

2-2)r2=f(ri,in) (mod p) -(c) 
2-3) qgrzco*!^. B^JilEltMi9. M^rS23lgU£ 

2-4)sk=(r2+s+l)+r2X, (mod q)---(d) X'Os ^rW^rMrf 

[00 93] 3 . ±IE2T-±Ji!4L^v:(r2 , s) ^i-f'B 

(4) ^— fB(Zj;|>Sfitf^^>y-b-i^'<7)a7C 

1. q gr2^^.if, W^^fgffit-§„ 

2. ri^g tr2+3+l)/sy ^ i2/s(j,od p)Srltt:L, 

f " 1 (ri , r2 ) =m (mod p) 

[ 0 0 9 4 ] i^j±m^»mmz-yuxmm 

■y y hr, tmrnmc^m^) j; 3 t^ngTitm 



(*)1: GF(p)3g, at^'m MU^t:Zq= {0,1, -.q-l} 
j&t/e l^zMb. f (g t y fl ^ , my s ^) &t^"f (g 
t y j , mgO iZi3\,-^X. 3^iCt,j,e ti^Hmm. 
^Xi^WMTf}^, ZCOfzl^^ recovery equation iSc^ 

[009 5] 2: GF(p) , m, g&yy , I^ZML. 
r2=f(ri,in)C?)iifi^m=f -i(ri,r2) T«^l>t#. ffi 
MC02mLmWi4>, 4>miXf -Hri/g, r2)=^c^(m, 
g) atXf-i(ri/yfl , r,) ^?&(m,y, ) t^S^t*^ 
'Bm^izX '9^§il/^3'9i^JfeS(recovery-equa 
tion attack , using g and y ^ , and homomorphism a 
ttack)&0jit-^l>„ 

[0096] tfziMmmmcox d m&^titz^ 

mm{^,h,c) ifi{r,',s.i) mmb\^omx'm<. 
^ftha, hb, hc^:m^^xm^^iix\^i. zcomm. 

hb, hc//(**)r2',s ^Iq<D7€kti>b^ . f^Wl^^tl 
fzMm^ CT)^- < :^X (Orr^' , ssl,Z)^lX. '^^--yco 

1. ha(r2',s,l)=ha(rr2' ,ss,l), hc(r2 ' ,s, l)=hc (rrj ' , 
ss,l) COi;|:hb(r2',s,l)-ha(r2',s,l)^hb(rr2',ss,l) 

2. ha(r2' ,s,l)=ha(rr2' ,ss,l), hb(r2 ' ,s, l)=hb(rr2 ' , 
ss,l)<7)t|:hc(r2',s,l)-ha(r2',s,l)^hc(rr2',ss,l) 

mtzi-ztt-^^. nm^Aziy)tii:mii^2-'jmi:ii 

(signature-equation atta(± using and Vi ) 'i-|ii|jfi± 

I . § ^i^zzcom^^imm^^^i-^ttmmi^ 

&fflv^jtjBMl:MLTt. W^5f;*^'2Jllc^jS§iiSi 
[0097] ^fc. f^**^^>#ftt-|>il:fiJM«&fflv^/i 

Jt<^JliC*t#V^Ti±. L.Harn and Y. Xu, "Design of g 
eneralised EIGamal type digital signatureschemes b 
ased on discrete logarithm". Electron. Lett., Vol. 
30(1994), 2025-2026. tCpLV\ tfz. ±fE»fiMcOj; 

r (S^4fi£T1iXx>yT2-3,^ y^-i^'MitXUXr- 
vTl) miilSthZbtK'^^. ZMz^i^mUzX 
Ofl^^^Iit 10(7)PiI(redundancy attack) ^MMT 

^t. Mtc^<7)ti^. c^(r)v^zn^uwmm)::b< 

nm.m9t^^^mmLx<nm.^:'ifhhm^^j: 

[ 0 0 9 8 ] =srfc, ij&(r)mmmm +m t Lx'ff 
ntzt\ zti\t'iJ}m\mmm x\ (*) mtz-thm 
^mx'i,i\^. ttzz<r)m. ri+m (DXoiztmm^m- 

^W^mz-thZbtrntU^. ha, hb, hct55LT 
±ia<7)ttW(**)*i.oi<7):^^,M-CtJ:V\ Si^^i 

btmth^\ 
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[0 0 9 9] tfz. ±Mi(^MmM9\-(^}iA.^^^ -y-b- 

RC 2^W>-/>'aMI*&SL/i^N-7^^ffii:MLT 

[oioo] tfz. ^^~^com^ 

it. #ffl?lS{±GF ( p ) ±X'^j:^tit hcob LfztiK 
^fiit^moF {p- ) ±X'^j:^fiXi>X\\ ^<^^ 

mmmm^zmh (mod p > x(Dm%\i (mod 

pi ) X^m%h^£^. ^(7)fzl^, ri fcm^GF (p 
^ ) XGF (pi ) t^^GF (pi ) ^^^f 1 SrfflV^ 
T3£ftHL/:;f^^ -i?)ffi&Mt:GF (pi )j&-^>*Rl^Z 

p' - io, 1, pi-i } ^com^^^xtmcom 

[0 10 1] ^fc. Z<^)^mii. {ai , , -, 
«r } ^GF (pi) COGF (p) ±(Om&tt&t 

GF (pi ) (7)7€X = Xi Cfi +--- + Xr CHr (x 

1 , X2 , X, eGF (p) ) tMLTTT (x) = 

xi +X2 P+-+X, p^-^T^m^ii^. ^co^m 
mi 3 iZTjk-t. ( a. ±tmmBM r = i co^t-S) 

( ^ 2 mum ) . *^Hj t« I. >t >y -fe- i^'n 

[0102] *^sMt . mmi^<om 
immmbm^j:h^xyK^ fztzi, wmoF (p) ±(7) 
ilts[)^^i^^«»aiitt-t■■*<, mmuE (gf 
(p) ) jK^fflHtt&fijffl-rs^c*. ^n™^^^* 

TA=J9)v^mmmm\zhm\mws^^i. 
— tf- 3 - 6 ffmmwm.xfMmm.'m.h Lx<n'^x^An 

[0 10 3] '^XT2^)-^=7><~9tLXF. (GF 
(p) ) i:. s\zmiX<^E (GF (p) )±<7)^7tt 

M^I.7cG*^-jDiA,^i, piil 03t3 0ffc/)«l:T'^5 

^ixti, E (GF (p) ) }L(7}mm^%wmmm 
^±:^-(r)Wz^mLx\±hMzmmx-hhz. 1 i 
q*^"^v^*\ ;^i(4. G<7)«fti5:a*7n&l^§^t: 

prS)&itt:i-s„ mv^mmmm-fhtzii^. 

f(i:xSIMI*T-$,l>o 

[0104] :&a5toafi£T-j^ m 1 mmmxn. p 
^ at t-i> m\^m\m.-fhtz^m^w^^ i & 



y:j--ifi0(7)fij^ia'lig|51 3 K 2 3 1^(:(±, g , g 
X\-^fZi)^Mzm^X . G, 2G, 4G, -j&MSil 

x\>^icr,ti^±%<m^£i.. mz. Ltuzhh^x. 
[ 0 1 0 5 ] HI 5(:. mitmmm(^ymmim§^^2 

2131ti;, G, 2G, 4G, SG-'-irhhfj't^tm 

Lxtma 0.^1 mmmcomMU 1 3 1 1 ijesp 1 3 4 

t:mxTfimgP2 1 3 3&l-LTC^I., t^t. ItHzX 
•9 . ^^iBUt LT. E ( GF ( p ) ) ±i^*Ys ( = X 

A G) ^ff-sL. m-ti. 

[ 0 1 0 6 ] 01 6t:. S^amSr^Ta If' AIIM 

fi^&^^-r, «:i3^^T{±. 3 2i,i2mmi?tmxh 
mmmtm^j:^^j:^\ 2 3 3i4Ri mM^x'h^. 2m 

SLiC^^gP 3 2 T«$i+f^SLI* k \sm7tGmitz 
2G, 4G, SGt;MJ£-ri>G2 , G4 , Ge 

mm^Lx\^mMmM2 331. 2miEkio 1 

<7)±o^^&ffi^)ttl■ra^5I^£tiLgP2 3 3 2. EOtHL/-^ 

miziam-tmi^imm 3 3 1 ^sogi i^nznt 
2m<^) im'oiUL. £t^&fi=a£ti:gE2 3 8 

3&F^jKLTV^So 

[0 107] 2 3 5(4. FmmX'h^. =m/x 
(Ri ) {mdp)cr>mmzX'0r2 i^^^. ^itCx 
(Ri ) (4Ri cr,xmmie.T$ii>. 2 3 8(4. ^ftJ^^l 
^r2fc±IESU£k&ttt:. ^msks (r2 +s + 
D+r^Xfl (mod p)J:Os^5|<is^|,SKg|5-C'$>?.o 
k-1 ( = a) ^^A|.k-l?Ii:a52 3 8 
1. r2 +1^5l<Ji^|,r, +l}Wa52 3 8 2, x 
S:*i^Sr, Xfl ?imgP2 3 8 3, rj +l + r2 + 
Xft ( = b ) ^jRis^^ r2 +l + r2 +Xfl ?||t:S523 
84, 5\;s • a = b (mod p) i D s S:**^!. stf»:g|52 
3 8 5^|^)gLTV^|,, 

[ 0 1 0 8 ] mo d?i^<7)ffi*\ qT-^< P Xh 

h<7)t,^mimmmt±^<m^x^. mi 7(4. %mm^ 
-WMf^imx'h^. :^mzm^x. gfiM4K r, 
mrn^m s ie'iii54 6 (4® 1 mmm hcotmt^^t^ 

\\ 2 4 7(4. $)4>i)^ti^)G^|B'lf LTV^|>G|B'i^T- 
2 4 4(4. ^J,^,*^t*^IE'[iLTV^SYs IB 

[0 109] 2 4 8(4. r, tsi}-^ {r, +s + l) 
/s^^<^l{r2 +S + 1) /simW'Xh^. 2 4 
9(4. r, /s^Sl^6r2 /smnmx$>^. 24 1 
1(4. E (GF (p) )±X'<nm%r2 /sY, 
r2 /sY, mmX'iil. 24 12(4. |5lt<E (G 
F ( p ) ) ±X-mM- ( (r^ + s + l)/s) G^ff 
a ( (r^ +s + l)/s) GfimaJT-J^I. „ 2 4 13 
(4. |5lt<. E (GF (p) ) ±T«1:Ri = ( (r 
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2+s + l)/s)G+(r2/s)Yfl ^fi^-oTRi 
(Ri ) r2 i^ZiZ. X (Ri ) (±E (GF (p) ) 

[0 110] .zmz^. qfc r2 (/)±>hltm:'ilom^ 

a«^i^i^iai8(;^-r, 
(1) -fey^-t^is^ms 
1 Oil 3 omcnmm.'ivt gf(p) ±co7CiOMiS£^^'p 

fc^:l>fin«^E kt. E{GF(p))i07C^*7Cl-WiO7C 

[0111] GF(p) XGF(p) XGF(p) 3&^^>GF(p) ^(0'¥ 
Wiia, hb, hcSr, ha(r2 ' ,s, l)=s, hc(r2 ' ,s, l)=r2 ' fc 

hb(r2',s,l) =r2' +s +1 (mod q) 

ha(r2',s,l)k = hb(r2 ' ,s, 1) + hcd". ' , s, l)x (mcd 
q) 

[0 1 1 2Hry:5'-(4. =yX'rJ^^'^y^~^tLXp 
, E(GF(p)), G, ha, hb, he i^:L-^l,z^J^mt^ . 
^r#3, *^/!)^I.E (GF (p) ) tfOf^^^)i{±. S'l^^ll 

mAmmmm'^6- 1 3 1 3 3 9 v-^trrr^iTi^L 

[0 113] :L-i^'A*^^>. ^-y^r-i/'aT^W^^iift 

£tf3/;fe. ^mmm'&mizimirz^mmimmm 

^^&x s tL, «j£t-i.i!^^il&fflRft*^E (GF 
( P ) ) ±-C«»:y A =x , G OSi"^. .I^iSr-fe 

[0114] ffitTK^iixs {±. ^-Hf A:5)ii^^<7)»^ 

( 3 ) ^-TAt j;|.W^£7)^^ 

1- TBt:S^^fi&^Tfc5fc-rS^-HfA{i. mT<7) 

1. sLitk 

2. 2iti:i^SLak^^^-r§. <i<7)SL^{±. # 

[0 115] 2-l)E (GF (p) ) _ht\ ?mRi=KGt 

iD. Ri Sfl^JS-tS, 

2- 2)^P±<Z)?mr2=m /x(Ri) (mod p)t:J;l9, 

X (Ri) (i. E (GF (p) ) ±<7) 

,c&RiC7)x®IffiT-$)l>o -(e) k-rSo 
2-3)Sp±iOfiS;sk=(r2 +s+l)+r2Xfl (mod ?)■■■ 

(f) iOs ^lti;t-|.. 



[ 0 11 6 ] 3 . (r2 , s) f B taifit-l. „ 

(4 ) gfitJtJL-Hf Bt:J;S^ ,>,^,_c/(7)f^ 

1. rA3b^^><7)^>y-b-i^- ( r2 , s) SSfiU^ 
:3.— rB(i((r2+s+l)/s)G+(r2/s)Y fl =Ri^E (GF 

(p) ) _hT-ttS:L, Ri ^*ftl>„ 

[0 117] 2. m =x(Ri)r2 ^ltt:t-|.;t 

(a) coioMg^^Cm i;PI4-r-i.i0t-5r<. 5^(e) CO 
iioiiZi^mm^WLXm^-LX^^h, -t^xh-h. r2=F(R 
i,m)=m/x(Ri)t^|,, WSSt;^)^ 
(*)1: GF(p)3g, y, , m, Z, = {0,l,---,q-l } 3t, 
j, e (:WL, F(tG+jY , m Xx(eYfl ))St/T(tG+jY 
ft , m Xx(eG))t:i3l,^T. 3«.j,e i}^2m(0iXB.^ 
X-nrnm immi^^ii) =5rv^„ t-'Sr^?*). mx (eY 
s ) . mx (eg) Of^^JSr^Sr^ffSrV^ 
[0 11812: E(GF(p)) bRi, G, Yj , GF(p) Br^, 
m CML, r2=F(Ri,m)Mt&m=F -i(Ri,r2) X^mt 

ht^. \m(n2mmm4>, 4>{znLx? -i(Ri-g, r 

2) ^<?5>(m,G) SI^'F-KRi-Ya , ^iP{m,X^ ) k^ 

M (recovery-equation attack using g and yA, and ho 
momorphism attack) S: mjSt'^ „ 

[0119] tfzmmmmcox a mf&.wz^ >y^r 

-i^'flTt^y^^cT)*^^. l^*^Ji05(;(b')coJ; 

;7Xia(a,b,c) *^(r2',s,i) cDmmbynmxm<. 

^ffiha. hb, hc^ffll,^T^S§iXTV^I.o ^^O^ftha, 
hb, hc3&i(**)r2',s &Z , C07€b-tht%. "fUbm^^ 
iX3t^«^<^-f<^Ti?)rr2', sslI^LT. 

1. ha(r2' ,s,l)=ha(rr2' ,ss,l), he (r2 ' , s, l)=hc (rr2 ' , 
ss,l) <7)k§hb(r2',s,l)-ha(r2',s,l)^hb(rr2',ss,l) 

2. ha(r2',s,l)=ha(rr2' ,ss,l), hb(r2 ' , s, l)=hb(rr2 ' , 
ss,l) cot #hc(r2 ' ,s,l)-ha(r2 ' ,s,l) ^hc(rr2' ,ss,l) 

(signature-equation attack using g and yA) EIjST" 

# . ^^iz;i(Dm^i!ii±m.m'^^^^^mmm 
m^^timmizMLx t . m^^ti^2mizj^m^ti& z t 

^■^ti&M^mzH\-^Xi±. L.Harn and Y. Xu, "Design 
of generalised ElGamal type digital signatureschem 
es based on discrete logarithm", Electron. Lett., 
Vol . 30(1994) , 2025-2026 . L V \ 

[ 0 1 2 0 ] jiiEMt^ i 0 tsmmmm^i> t 
G toffis:*i£«frGF(p) <7)p tmL<^x6<Dx\ mmm 

icoXo l,zr^ comimmt^ Xr- >y r^:HM-tl i t ^ 
< . rn&izX 19 ^IJt lOiOMSg (redundancy atta 

ck) ^mmx'^^. tfz. ±mcomimu^mmim^ 
fztiK ztLmmm^mx. (*) mrzi-hcotci^^P! 
xhx^\ zcom.. mtifyjmcomzTimmb^t 
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i 0 titmi^vj^ s \ ^mmz-t6 ; t lv ^„ ha, 

hb, hct:MLTt. _hlBc7)14«(**)&ioii?)^^>MT 

[0 1 2 1 ] S/S, ±tmismr:U. JE«f*GF(p) C73p 

sLmi,zMLxm^i. m^i^'y't~=jbbhi,zm'o. 

tfz. m<. E (GF (p) ) r^<E (GF 

(pO ) XlJnXhiW 

[0] 23] tfz. ^--^'li. ^c^mmmco^^m 

miim^mm^^b^^zmmxhi. i^ii. ^mm 
immmi,zm-^\ -^xmm lx # tzt\ ^^wMnm^m 
miimnzm^^ti^x^'^<^mmx-h^. 

[0121] 

^iix\-^mmmco^ y^~=JW€m^i,zm-i6-:><7) 
mmmmmt^^bmmb^^^. i(D-ijT^(Dfz 

MzHM^iimnrnhMm-^ I , zcr^tz^. 

'j^Mmm^zav^x. ^^^^ -y^-^mTtmrn^ 
if^mm^ I b mmb d , ^mmmmim^^ 

xh^. 

m4]mm^. mmmm-timmizxire 

caovry-equation Tm(^m!^^mi^LfzmX'$)l . 
[ H 5 ] N t < , redm6mcy:mcOimmX% ^ „ 

§tii>d.w 4 'J9jmiwm(Dimm^mx-h6. 
mi] ±tmmmizinfi. mmm^mmco^mm 

mdiiTj'.Li-zmx^l, 

[09] Rt<, W^afi£ffo^-^fAffltor2 tf-i: 



[010] |5|t<. jL-HfA(ic7)SKgii&4i'i:^tUcii 

mmxht. 

[01 1] |5lt<. g^^MlL/S^-fBtOfiWi 

mmmi^^^Lfzmxhi. 
[012] ^t<, g^:X^gmL/Si-f^'Btiiji7)gai 

(7)ffi)j!c0T-ife§„ 

[0131^1 mmm<r)mmb ix. gf ( p ) t-^ 
<GF (p^: ) ^mifz^co. mmTtizxiGF 

(pi ) *^^>Zp,= {0,1, -. P=^-i } ^(7)^^ 

m^^tfzmx'i)i>. 

[014] *^BJtC« I, >y -fe- >>-ii7^W:gafi£om 

mx:hh. 

m\'5 \ iimmmzi^Vfh. wmw^^\zmh 
E (GF (p) ) Lx:<m%-km:mhfz^<mmh 

h., 

[01 b] vi&mm\z.mhm^-mwAi^m:^~ 

[01 7] WK. m^-x-k^m-fh:y--^^(mm 
xhh. 

[018] i«it:<, ifc. ffi. ^(n^-^^'bbhfzm^ 

3. 4. 5. 6. 'kWif^'j-^jvm.mmz^'^fifz 

1 1 %mm!^^mt^mm> 

1 2 %mm>m 

1 3 i^^MiifMgp 
1 4 

1 5 |{}^aa?^Isf^)£gE 

1 6 iB^naagp 
3 1 r2 %mu 

3 2 2jtgM^fegP 

3 3 ri Wm 

3 4 afi:5:Al)g|5 
3 5 fpgicii 

3 6 q^itgP 

3 7 mtm 

3 7 3 JtKgP 

3 8 SKgp 

38 5 stmm 

4 1 gfiSE 
4 2 tgffii? 

4 3 qlB'ggl^ (^— fB) 
4 4 Wm 
4 5 r2 faUSE 



(19) 



mm¥9-l 6 0492 



4 6 
47 
4 13 
4 14 
2 13 1 
2 13 3 



= ys (mod p)?lS[g|5 



2 3 3 Ri jIEiS 

23 5 FMicgp 
2 38 SKgP 

24 4 laesE 
24 13 Ri mm 

24 14 m?mg|I 



[HI] 



:#IW:GFft,) 

,.ii|=ri+m,fVi,r2)=f2-ri 

Mrj.s,l)k=H)(rj,s,l)+k(rj,s,llx^ 

lH(rj,s,l)=rj 

hb(rj^,l) ^r,+s 1-1 
\ MriAl)=s 



2-2.r2=J(ri^il(midp) 
2■3.qSr^^:t(fl^:Si^. 

3.(r;,s|^ai 



(3) ^ ^^l- v'^yc 



J.-1f A B 








F 






s 








X 



[HI 0] 



I ^384 I 



n+l + r2XA(=b) 



(sa =b (moiq)^m<) 



#l«¥9-l 6 0492 



fit m 
q=g''(modp) 



gV/? =m(inod p) 



^/^mmirj: 5 recovery-equation^^ 



r2 = MyA"cr' 



3. (rj, s)4m=Myfte 



[07] 



=MyA« 



Aro%S:i:^4 : m, r2,s 



rg = rj' + nq (*r,) 



Vi6 t 



"]-» | >&g8ii&ga"S^ <^j 



i=lA-, [logsq] 



^13 


2 


133. 




sj{tf)aiusii 





(21) 



mm¥9-l 6 0492 



[08] 



[09] 



IE 



□I 



I I 




If- 


^331 








,m ^35 








351 










.,332 
--333 
__334 

^36 




,].n-i-m ^ 352 






iSSMmod p) 





mm 



r4!HHl^'>jl5ai SKSC-v 




{ai.-.ajli-. GF(pOfflGF(p)±®J£)S„ ) 



3 



7r(X)=xi+X2pt-x^''-' 



(22) 



mm¥9-l 6 0492 



[012] 



[014] 



r2 45 js ^4 6 




[01 5] 
^] ,2131 









G 


7,0 


4G 


8G 








Gi 


02 


G4 


Ga 
















I ti(GF(p):^,ha,hb,hc oy^m 



-^2 






^2 


















1- 


-IE 





[01 6] 




(23) 



mm¥9-l 6 0492 



317] 



[018] 




^249 I i_ 









Ri 


= ((r2+s+l)/s)G+(n*YA) 






J 2414 



















lilifr5Al)=r2+s+l 



i.mttt 

2-2.T2S«/i(Rl)iac«lp) 
2-33k=(r2+s+l)+r2iji 



